EVlink City, EVlink Parking, EVlink Smart Wallbox Cross-Site Scripting Vulnerability (CNVD-2021-62162)

Schneider Electric EVlink City and others are a charging solution for electric vehicle charging stations from Schneider Electric (France). EVlink City, EVlink Parking, EVlink Smart Wallbox cross-site scripting vulnerability, which stems from the fact that when malicious parameters are submitted to the charging station web server, an attacker can exploit the vulnerability to emulate the user managing the charging station or perform actions on their behalf.